Employment and Career Issues: Interview - Technical Questions
Hi, Thank you, that's a positive start. I will keep that in mind
View ArticleForensic Software: Encase 7 search hit export?
Hi all, (*updated for Clarity*) It might be simple however I cannot find the solution. How do you export keyword hits, hits preview, etc in encase v7.09? In EnCase 6.19.7 its very easy and simple to...
View ArticleEmployment and Career Issues: Any tips on Securing employment after graduating?
I'm sure its the same story for many of us, spending hours filling in application forms for graduate positions, only to fall foul of online assessments. I have lost count of how many forensics jobs...
View ArticleEmployment and Career Issues: Interview question about preserving metadata
To be honest mate, it doesn't sound like you have a background in forensics. The chain of custody is a big deal, as is the prevention of data being altered during the investigation. Both these areas...
View ArticleEmployment and Career Issues: Graduate looking to be one step ahead of the...
K2day, you sound like a University of Glamorgan / University of South Wales graduate. Am I right in thinking your project involved the use of the Forensic Research lab lol
View ArticleGeneral Discussion: Very Very Old Hard Drive
Is it something really old IDE, *like* this one?...
View ArticleGeneral Discussion: Bootable Imaging distros
Deltron wrote: Sorry writing fast. I have a windows 7 laptop to image but would like to use a bootable cd/usb; anyone know of a iso that has ftkimage on it? Yes....
View ArticleGeneral Discussion: EMDMGMT query
keydet89 wrote: I wouldn't expect them to. What is it that you're attempting to determine? Are you simply wondering why those keywords don't seem to appear anywhere else in the Registry, or was that...
View ArticleGeneral Discussion: Quick Question. BitTorrent History
Dear All, Is there any way to identify whether a torrent download has been completed, the location saved to etc. This is for the Client BitTorrent. I have so far found that the torrent files have been...
View ArticleDigital Forensics Job Vacancies: New Opportunity in the Dallas, Ft. Worth,...
We are seeking a digital forensics examiner to examine cell phones, computers, tablets, etc. for malware and incriminating evidence in the Dallas - Fort Worth Texas area. In the beginning this position...
View ArticleMobile Phone Forensics: Iphone documents file path
UFED Logical was used. And yes when you right click from the image and go to file; thats the file path. Sorry for delay been slammed.
View ArticleGeneral Discussion: Quick Question. BitTorrent History
Thanks for the reply. Yes, IEF does pull out stuff, but it doesn't say whether it had finished downloading, date added, %complete, date download finished etc..
View ArticleForensic Hardware: Running Forensics Software in Bootcamp on Mac
Thank you for the information. Thunderbolt not being hot swap is annoying. This is really good information though. Thank you very much.
View ArticleForensic Software: Tableau Encase Acqusition problem
So a little background first: I work at an IT-Security firm that currently doesn't handle forensic cases but me and a senior collegue have been tasked to handle a case from a customer. The reason I was...
View ArticleClassifieds: Looking to buy EnCase v7 dongle
Please contact me if you have one to sell, need it to prepare for a forensics job and practice for EnCase certification. Thanks!
View ArticleForensic Software: Encase 7 search hit export?
The "Keyword Search with Range Bookmarking" app on EnCase App Central might help. This EnScript-based app allows you to run a keyword search and bookmarks a specified # of characters on either side of...
View ArticleMobile Phone Forensics: Software Write Blocker for Android
Hi All, In my university project I would like to implement a simple software write blocker for Android mobile forensics. Would anyone help me with this? I would like to know how it works in basic...
View ArticleMobile Phone Forensics: Analyzing SMS.db question
topsirloin wrote: I figured I would resurrect an old thread rather than create a new one. I've been dealing with quite a few iPhone's lately belonging to very active imessage users dealing with 10s of...
View ArticleGeneral Discussion: EMDMGMT query
Cults14 wrote: FYI I can see no VM files in the DD image I have of the drive, a colleague (in Colorado) of our ex-worker however tells me that the user kept about a dozen VMs on an external drive which...
View ArticleGeneral Discussion: Very Very Old Hard Drive
Found the jumper for you. It is highlighted in red in the picture: As previously stated, might also be worth using a 40 conductor IDE cable as well. Hope this helps JC
View Article